Privacy Policy

1. Introduction

This Privacy Policy ("Policy") sets out how 999n ("the Platform", "we", "us", "our"), operating the website at 999n.cam, collects, uses, stores, discloses and otherwise processes personal data relating to users of the Platform ("User", "you", "your"), including players accessing 999n from Pakistan and other jurisdictions.

This Policy applies to all personal data collected through: the 999n website and any associated mobile interfaces; account registration and login; deposits, withdrawals and transaction processing; identity verification (KYC) processes; customer support communications; marketing and promotional interactions (where you have opted in); and cookies and tracking technologies deployed on our Platform.

By registering an account on 999n, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein, where such consent is the applicable legal basis. If you do not agree with this Policy, you should not use the Platform.

This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy.

2. Definitions

In this Policy, the following terms carry the meanings set out below:

3. Data Controller

The Data Controller responsible for the personal data collected through 999n.cam is the operator of the 999n platform. For enquiries related to data protection, you may contact us at the address set out in Section 16 (Contact Us) of this Policy.

Where 999n engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification vendors or analytics providers — those parties act as Data Processors and are bound by contractual obligations consistent with applicable data protection law.

4. Data We Collect

We collect personal data in the following categories:

4.1 Registration & Account Data

When you register an account on 999n, we collect:

• Full legal name;
• Date of birth (to verify the minimum age requirement);
• Email address;
• Residential address;
• Username and encrypted password;
• Phone number (where provided or required).

4.2 Identity Verification (KYC) Data

To comply with our KYC and anti-money-laundering obligations, we may collect:

• A copy of your valid CNIC (Computerised National Identity Card) — front and back — or passport;
• Proof of residential address (such as a utility bill or bank statement);
• A selfie or liveness check image;
• Source-of-funds documentation in cases requiring enhanced due diligence.

4.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates and payment method identifiers;
• Payment method details required to process transactions (such as bank account reference, mobile wallet identifier or crypto wallet address);
• Transaction history and account balance records.

4.4 Gameplay & Betting Data

• Betting history, game session data, wager amounts and outcomes;
• Bonus opt-ins and wagering progress;
• Responsible gambling settings including any limits or self-exclusion status set by you.

4.5 Technical & Usage Data

• IP address and approximate geolocation (country/city level);
• Device type, operating system and browser type;
• Pages visited, session duration and navigation patterns;
• Error logs and crash reports.

4.6 Communications Data

• Support ticket content and chat transcripts;
• Email correspondence with our team;
• Survey responses and feedback submissions (where provided voluntarily).

5. Legal Basis for Processing

We process your personal data on the following legal bases, which vary depending on the type of data and the purpose of processing:

6. How We Use Your Data

999n uses the personal data we collect for the following purposes:

6.1 Account Management

To create and maintain your account, authenticate your login, manage your profile and process your Account settings including responsible gambling limits and preferences.

6.2 Transaction Processing

To process your deposits and withdrawals via payment methods that may include familiar Pakistani options such as Easypaisa, JazzCash, Raast, bank transfers via HBL, UBL, Meezan Bank and Bank Alfalah, debit/credit cards and cryptocurrency. Payment method names are contextual references only; these providers do not endorse gambling operators.

6.3 Regulatory Compliance (KYC & AML)

To verify your identity and age before processing withdrawals or as otherwise required; to meet our anti-money-laundering obligations; to detect and prevent financial crime; and to respond to lawful requests from regulatory or law enforcement authorities.

6.4 Responsible Gambling

To monitor gambling patterns for signs of potentially problematic behaviour; to apply and enforce limits or exclusions you have set; and to contact you where we have a reasonable concern about your gambling activity.

6.5 Platform Improvement

To analyse how users interact with the Platform, identify technical issues, test new features and improve the overall user experience for players across Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and beyond.

6.6 Security & Fraud Prevention

To detect and prevent fraudulent activity, multi-accounting, money laundering, match-fixing and other forms of prohibited conduct as defined in our Terms & Conditions.

6.7 Marketing Communications

Where you have opted in to receive marketing communications, we may send you promotional offers, bonus notifications and platform updates. You may withdraw consent and unsubscribe at any time by contacting support or using the unsubscribe mechanism in any marketing email.

7. Data Sharing & Disclosure

We do not sell, rent or trade your personal data. We may share your data with third parties only in the following circumstances:

7.1 Service Providers (Data Processors)

We engage third-party companies to provide services on our behalf, including payment processing, identity verification, fraud detection, cloud hosting, customer support software and analytics platforms. These parties process personal data only on our instructions and are bound by data processing agreements.

7.2 Legal & Regulatory Obligations

We may disclose personal data where required by applicable law, court order, regulatory mandate or in response to a lawful request from a competent authority. This includes disclosures required under anti-money-laundering legislation.

7.3 Business Transfers

In the event of a merger, acquisition, sale of assets or restructuring involving 999n, personal data may be transferred to the relevant parties as part of that transaction. Users will be notified of any such transfer and any material change in how their data is processed.

7.4 Protecting Rights

We may disclose personal data where we believe in good faith that disclosure is necessary to protect the rights, property or safety of 999n, its users or the public — for example, in connection with fraud investigation or litigation.

8. Data Retention

We retain personal data for as long as is necessary to fulfil the purposes described in this Policy, including to comply with legal and regulatory retention obligations. The specific retention period depends on the category of data and the applicable regulatory requirement:

• Account and transaction data — retained for a minimum period required by applicable AML and financial regulations after the closure of your Account (which may be five or more years depending on the jurisdiction);
• KYC documentation — retained for the period required by applicable regulations and no longer than reasonably necessary for compliance purposes;
• Support communications — retained for a reasonable period sufficient to resolve the underlying query and any subsequent dispute;
• Marketing preference data — retained until you withdraw consent or request erasure, subject to any overriding legal obligation;
• Technical and usage logs — retained for a limited period for security and analytical purposes.

When data is no longer required, we delete or anonymise it in accordance with our internal data retention procedures and applicable law.

9. Data Security

999n implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. Our security measures include, without limitation:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and our servers;
• Encrypted storage for sensitive data including passwords (using industry-standard hashing) and KYC documents;
• Role-based access controls limiting internal access to personal data to authorised personnel with a documented need;
• Regular internal security reviews and vulnerability assessments;
• Incident response procedures to detect, report and respond to personal data breaches.

No method of data transmission or storage can be guaranteed to be 100% secure. While we take all reasonable steps to protect your data, we cannot warrant absolute security. You are responsible for maintaining the confidentiality of your account credentials.

Important: 999n will never ask you to provide your password via email, chat or any other communication channel. Always upload sensitive documents — including your CNIC or passport — through the official 999n secure HTTPS verification portal only. Never send identity documents via WhatsApp, Telegram, social media DMs or unsecured email.

10. Cookies & Tracking Technologies

999n uses cookies and similar tracking technologies (including pixel tags, web beacons and local storage) on the Platform. Cookies allow us to recognise your browser, maintain your session, remember your preferences and analyse how the Platform is used.

10.1 Types of Cookies We Use

10.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings at any time. Disabling essential cookies may impair Platform functionality, including your ability to log in and maintain an active session. Instructions for managing cookies are available in your browser's help documentation.

11. International Data Transfers

Your personal data may be transferred to and processed in countries outside of Pakistan, including countries where our servers are hosted and where our third-party service providers operate. We take reasonable steps to ensure that any international transfer of personal data is subject to appropriate safeguards — such as standard contractual clauses or equivalent mechanisms — consistent with applicable data protection requirements.

By using the Platform, you acknowledge that your personal data may be transferred internationally as described in this Policy.

12. Minors

999n is strictly an adults-only platform. We do not knowingly collect personal data from individuals below the minimum age requirement — 18 years of age, or the higher minimum required by the operator's licence jurisdiction. Our registration process and KYC verification are designed in part to detect and prevent underage access.

If we become aware that we have inadvertently collected personal data from an individual below the minimum age, we will promptly delete that data, close the relevant Account and void any associated transactions. If you believe that a minor has registered an Account on our platform, please contact us immediately at [email protected].

13. Your Data Rights

Depending on applicable data protection law, you may have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us using the details in Section 16.

We will respond to data rights requests within a reasonable timeframe. We may need to verify your identity before processing a request. Some rights are subject to limitations where overriding legal obligations — such as AML retention requirements — apply.

14. Complaints

If you believe that 999n has processed your personal data in a manner that is not consistent with this Policy or applicable data protection law, we encourage you to contact us in the first instance using the details in Section 16. We take all privacy complaints seriously and will respond within a reasonable timeframe.

Where you are not satisfied with our response, you may have the right to lodge a complaint with a relevant supervisory or data protection authority in the jurisdiction governing our operations. Details of the applicable authority will be provided upon request or where disclosed in our operator licence documentation.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices or our Platform. Where a change is material — meaning it affects your rights or the way we handle your personal data in a significant way — we will provide advance notice via a platform notification or email to the address registered on your Account.

Minor or administrative changes (such as clarifying existing descriptions without substantive effect) may be made without specific notice, though the "Last Reviewed" date at the top of this page will always be updated to reflect the most recent version. Continued use of the Platform after the effective date of any update constitutes acceptance of the revised Policy.

16. Contact Us

For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data — including to exercise a data right set out in Section 13 — please contact us using the following details: